Traffic Trace Info
DumpFile: 201103261400.dump
FileSize: 2235.41MB
Id: 201103261400
StartTime: Sat Mar 26 14:00:01 2011
EndTime: Sat Mar 26 14:15:00 2011
TotalTime: 899.87 seconds
TotalCapSize: 1753.26MB CapLen: 96 bytes
# of packets: 31597437 (20872.49MB)
AvgRate: 194.64Mbps stddev:45.55M
IP flow (unique src/dst pair) Information
# of flows: 806762 (avg. 39.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.0% 3.7% 2.6% 2.6% 1.7% 1.3% 1.1% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 463202
Top 10 bandwidth usage (bytes/total in %):
29.4% 20.4% 6.5% 6.1% 5.5% 3.9% 2.8% 2.7% 2.6% 2.6%
# of IPv6 addresses: 5606
Top 10 bandwidth usage (bytes/total in %):
30.8% 30.8% 9.8% 8.0% 6.6% 5.7% 4.8% 4.4% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201103261400.pktlen.png)
detailed numbers
[ 32- 63]: 7150381
[ 64- 127]: 6871906
[ 128- 255]: 1658150
[ 256- 511]: 1136800
[ 512- 1023]: 1711051
[ 1024- 2047]: 13069149
Protocol Breakdown
![[protocol breakdown chart]](201103261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31597437 (100.00%) 21886389100 (100.00%) 692.66
ip 31486205 ( 99.65%) 21835830209 ( 99.77%) 693.50
tcp 24800597 ( 78.49%) 19001328766 ( 86.82%) 766.16
http(s) 12036044 ( 38.09%) 14526591251 ( 66.37%) 1206.92
http(c) 6508896 ( 20.60%) 1652778924 ( 7.55%) 253.93
squid 481470 ( 1.52%) 110853027 ( 0.51%) 230.24
smtp 106527 ( 0.34%) 50335477 ( 0.23%) 472.51
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 40919 ( 0.13%) 20340440 ( 0.09%) 497.09
pop3 11346 ( 0.04%) 5576392 ( 0.03%) 491.49
imap 8517 ( 0.03%) 7588098 ( 0.03%) 890.94
telnet 373 ( 0.00%) 24146 ( 0.00%) 64.73
ssh 436686 ( 1.38%) 95817656 ( 0.44%) 219.42
dns 334344 ( 1.06%) 339535510 ( 1.55%) 1015.53
bgp 547 ( 0.00%) 82354 ( 0.00%) 150.56
napster 25 ( 0.00%) 2419 ( 0.00%) 96.76
realaud 46 ( 0.00%) 4358 ( 0.00%) 94.74
rtsp 6208 ( 0.02%) 7676604 ( 0.04%) 1236.57
icecast 432 ( 0.00%) 67928 ( 0.00%) 157.24
hotline 361 ( 0.00%) 22626 ( 0.00%) 62.68
other 4827851 ( 15.28%) 2184031256 ( 9.98%) 452.38
udp 4160292 ( 13.17%) 2045679756 ( 9.35%) 491.72
dns 553256 ( 1.75%) 106771167 ( 0.49%) 192.99
realaud 15 ( 0.00%) 1494 ( 0.00%) 99.60
halflif 26 ( 0.00%) 1881 ( 0.00%) 72.35
starcra 24 ( 0.00%) 2559 ( 0.00%) 106.62
everque 347 ( 0.00%) 54821 ( 0.00%) 157.99
unreal 6 ( 0.00%) 1062 ( 0.00%) 177.00
quake 14 ( 0.00%) 1327 ( 0.00%) 94.79
cuseeme 20 ( 0.00%) 3038 ( 0.00%) 151.90
other 3606310 ( 11.41%) 1938708965 ( 8.86%) 537.59
icmp 372382 ( 1.18%) 48548739 ( 0.22%) 130.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3026 ( 0.01%) 997576 ( 0.00%) 329.67
ip6 2088557 ( 6.61%) 722905047 ( 3.30%) 346.13
other 61166 ( 0.19%) 16351055 ( 0.07%) 267.32
frag 1764 ( 0.01%) 1794952 ( 0.01%) 1017.55
ip6 111232 ( 0.35%) 50558891 ( 0.23%) 454.54
tcp6 49964 ( 0.16%) 35496603 ( 0.16%) 710.44
http(s) 2050 ( 0.01%) 2668419 ( 0.01%) 1301.67
http(c) 8854 ( 0.03%) 790140 ( 0.00%) 89.24
squid 55 ( 0.00%) 4658 ( 0.00%) 84.69
smtp 161 ( 0.00%) 56606 ( 0.00%) 351.59
ftp 66 ( 0.00%) 5887 ( 0.00%) 89.20
dns 221 ( 0.00%) 57704 ( 0.00%) 261.10
bgp 92 ( 0.00%) 16864 ( 0.00%) 183.30
other 38465 ( 0.12%) 31896325 ( 0.15%) 829.23
udp6 33454 ( 0.11%) 8662122 ( 0.04%) 258.93
dns 26537 ( 0.08%) 6816124 ( 0.03%) 256.85
everque 2 ( 0.00%) 209 ( 0.00%) 104.50
quake 4 ( 0.00%) 441 ( 0.00%) 110.25
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 6910 ( 0.02%) 1845240 ( 0.01%) 267.04
icmp6 23180 ( 0.07%) 3190685 ( 0.01%) 137.65
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4521 ( 0.01%) 3194107 ( 0.01%) 706.50
tcpdump file: 201103261400.dump.gz (758.28 MB)